Static task
static1
Behavioral task
behavioral1
Sample
e07b71bf381ca9ff39bb65869b66583347993858552e1c875813e4bcc3501beb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e07b71bf381ca9ff39bb65869b66583347993858552e1c875813e4bcc3501beb.exe
Resource
win10v2004-20230915-en
General
-
Target
146fb741e0dd7dbfe4e5c1c04e50ce30.bin
-
Size
590KB
-
MD5
0f7dd77b4b5f789844fed5a03877c728
-
SHA1
b360859af62013c398263aaadc40c9d81a370e7b
-
SHA256
081288b42051c0ee693ce97c32d85eae1fbef3c40a216ae33b0d42870a6ee59e
-
SHA512
45f875fff6c1df68ddb28f56bf4daaf9554f579c40ee410c903fce0b96296dd6112e5a9d0daf6a781295c4f183c490d4e95aca0e9edef1ba9812e152b6fc1523
-
SSDEEP
12288:JrD6DeoScEsRVBsNJLXYzW8iCeHZHdeNTChjM45AX:hD6D5Sc7sJLILt8oTC+eM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e07b71bf381ca9ff39bb65869b66583347993858552e1c875813e4bcc3501beb.exe
Files
-
146fb741e0dd7dbfe4e5c1c04e50ce30.bin.zip
Password: infected
-
e07b71bf381ca9ff39bb65869b66583347993858552e1c875813e4bcc3501beb.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ